@pixelvibing/cli 0.56.2 → 0.57.0

package/README.md

@@ -10,13 +10,21 @@ cd my-game
 pixel-vibing-cli setup
 ```
 
-`setup` signs you in in the browser, makes the directory a local project, which means a
-`pixelvibing.json` and a `pixelvibing/` folder, links it to one of your platform
-projects, and installs the Skills into `.claude/skills/` or `.codex/skills/`: a hub, the
-style guide's, and one for each kind of art. A block in `AGENTS.md`, and in `CLAUDE.md` when
-there is one, names which Skill to load for which request. It also
-configures the remote MCP server in `.mcp.json` or `.codex/config.toml`, by a command
-that prints the token's header when the harness connects, so the token is in no file.
+`setup` goes a step at a time: it signs you in in the browser, makes the directory a local
+project, which means a `pixelvibing.json` and a `pixelvibing/` folder, links it to one of your
+platform projects — picked from a list, or made there from an idea — keeps that project's own
+token, the one its Install tab in the web app shows, and installs the Skills — a hub, the style
+guide's, and one for each kind of art — into the coding assistants you mark, as many as you like:
+Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot. `--harness` names them instead; without a terminal it takes those the repository has,
+else Claude Code. It then asks whether the Skills are yours, for every project, in each harness's
+directory in your home (`~/.claude/skills/`, `~/.agents/skills/`, `~/.cursor/skills/`,
+`~/.gemini/skills/`, `~/.config/opencode/skills/`, `~/.copilot/skills/`), which is the default, or
+this repository's alone (`.claude/skills/`, `.agents/skills/`, `.cursor/skills/`, `.gemini/skills/`,
+`.opencode/skills/`, `.github/skills/`); `--scope user|project` answers it. A block in `AGENTS.md`, and in `CLAUDE.md` when
+there is one, names which Skill to load for which request. A coding assistant reaches the
+platform through the CLI, so `setup` writes no MCP entry. A client that needs the remote MCP
+server copies its entry, with the project's token, from the project's Install tab in the web app,
+into a file kept out of git; `logout` removes the token from such entries.
 Each step it finds done already is skipped.
 
 | Command | What it does |
@@ -29,8 +37,8 @@ Each step it finds done already is skipped.
 | `guide pull\|push\|revise\|show\|versions` | Read and write the project's style guide |
 | `seal` | Seal `pixelvibing/out/` into `pixelvibing/build/assets.eac` |
 | `export default\|pixi\|phaser\|godot` | Pack the art into sprite sheets and the map into placed sprites, for an engine |
-| `update` | Replace the installed Skills with the ones this version ships, add those it ships since, rewrite their block in `AGENTS.md`, and bring the MCP server's entry to it |
-| `mcp headers` | Print the header a harness sends the remote MCP server, from the kept token |
+| `update` | Replace the installed Skills with the ones this version ships, add those it ships since, rewrite their block in `AGENTS.md`, leaving any MCP server entry as it is |
+| `mcp headers` | Print the header for the remote MCP server, from the kept token, for an entry written by hand |
 | `editor` | Open the PixelVibing desktop app on the project |
 
 Every command takes `--help`, and `--json` for an answer a script reads. On a machine with

package/dist/pixel-vibing-cli.js

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
-import { stat, readFile, writeFile, mkdir, readdir, rename, realpath as realpath$1, lstat, rm } from "node:fs/promises";
+import { readdir, readFile, mkdir, writeFile, stat, rename, realpath as realpath$1, lstat, rm } from "node:fs/promises";
 import { join, dirname, resolve, relative, sep, basename, isAbsolute } from "node:path";
+import { createHash, randomBytes } from "node:crypto";
+import { fileURLToPath } from "node:url";
 import { realpath, promises } from "node:fs";
 import { promisify, parseArgs } from "node:util";
-import { randomBytes, createHash } from "node:crypto";
 import { createServer } from "node:http";
 import { inflate, deflate, deflateSync, inflateSync } from "node:zlib";
-import { fileURLToPath } from "node:url";
 import { spawn } from "node:child_process";
-import { hostname, homedir } from "node:os";
+import { homedir } from "node:os";
 import { createInterface } from "node:readline";
+import { intro, outro, log, select, multiselect, isCancel } from "@clack/prompts";
 const API_BASE = typeof __PIXELVIBING_API__ === "string" && __PIXELVIBING_API__ !== "" ? __PIXELVIBING_API__ : "/api";
 class SignedOut extends Error {
   constructor() {
@@ -76,6 +77,7 @@ function createAccountApi(fetcher = (input, init2) => fetch(input, init2), base
     me: async () => (await call("/me")).json(),
     tokens: async () => (await (await call("/tokens")).json()).tokens,
     createToken: async (name, project) => (await call("/tokens", { method: "POST", body: { name, project } })).json(),
+    projectToken: async (project) => (await (await call(`/projects/${encodeURIComponent(project)}/token`)).json()).token,
     projects: async () => (await (await call("/projects")).json()).projects.map(({ id: id2, name }) => ({ id: id2, name })),
     revokeToken: async (id2) => {
       await call(`/tokens/${encodeURIComponent(id2)}`, { method: "DELETE" });
@@ -158,8 +160,239 @@ async function tokenFor(store, origin, env) {
     throw error;
   }
 }
+const HARNESSES = {
+  claude: { name: "Claude Code", directory: ".claude", userDirectory: ".claude", found: [".claude"] },
+  codex: { name: "Codex", directory: ".agents", userDirectory: ".agents", found: [".codex"] },
+  cursor: { name: "Cursor", directory: ".cursor", userDirectory: ".cursor", found: [".cursor"] },
+  gemini: { name: "Gemini CLI", directory: ".gemini", userDirectory: ".gemini", found: [".gemini"] },
+  opencode: { name: "OpenCode", directory: ".opencode", userDirectory: ".config/opencode", found: [".opencode", "opencode.json"] },
+  copilot: {
+    name: "GitHub Copilot",
+    directory: ".github",
+    userDirectory: ".copilot",
+    found: [".github/skills", ".github/copilot-instructions.md", ".vscode/mcp.json"]
+  }
+};
+const HARNESS_NAMES = Object.keys(HARNESSES);
+const directoryOf = (harness, scope) => scope === "user" ? HARNESSES[harness].userDirectory : HARNESSES[harness].directory;
+const skillsDirectory = (harness, scope = "project") => `${scope === "user" ? "~/" : ""}${directoryOf(harness, scope)}/skills`;
+const SKILLS_MANIFEST = "pixelvibing-skills.json";
+const sha256$1 = (text2) => createHash("sha256").update(text2).digest("hex");
+function skillHash(text2, files = []) {
+  if (files.length === 0) return sha256$1(text2);
+  const hash = createHash("sha256").update(text2);
+  for (const file of files) hash.update(`\0${file.path}\0`).update(file.text);
+  return hash.digest("hex");
+}
+async function referencesOf(directory) {
+  let names;
+  try {
+    names = (await readdir(join(directory, "references"), { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name);
+  } catch {
+    return [];
+  }
+  const files = [];
+  for (const name of names.sort()) files.push({ path: `references/${name}`, text: await readFile(join(directory, "references", name), "utf8") });
+  return files;
+}
+const SHIPPED_DIRECTORY = fileURLToPath(new URL("../skills/", import.meta.url));
+async function shippedSkills(directory = SHIPPED_DIRECTORY) {
+  const names = (await readdir(directory, { withFileTypes: true })).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+  const skills = [];
+  for (const name of names.sort()) {
+    const text2 = await readFile(join(directory, name, "SKILL.md"), "utf8");
+    const files = await referencesOf(join(directory, name));
+    skills.push({ name, text: text2, ...files.length > 0 ? { files } : {}, sha256: skillHash(text2, files) });
+  }
+  return skills;
+}
+async function exists$2(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function harnessesNamed(named) {
+  const unknown = named.filter((name) => !Object.hasOwn(HARNESSES, name));
+  if (unknown.length > 0) throw new CliError(`--harness is ${HARNESS_NAMES.join(", ")}, not ${unknown.join(", ")}`);
+  return [...new Set(named)];
+}
+async function harnessesFound(root) {
+  const found = [];
+  for (const harness of HARNESS_NAMES) {
+    for (const path of HARNESSES[harness].found) {
+      if (await exists$2(join(root, path))) {
+        found.push(harness);
+        break;
+      }
+    }
+  }
+  return found;
+}
+async function harnessesFor(root, named) {
+  if (named.length > 0) return harnessesNamed(named);
+  const found = await harnessesFound(root);
+  return found.length > 0 ? found : ["claude"];
+}
+const manifestPath = (root, harness, scope) => join(root, directoryOf(harness, scope), SKILLS_MANIFEST);
+const skillPath = (root, harness, scope, name) => join(root, directoryOf(harness, scope), "skills", name, "SKILL.md");
+async function readManifest(root, harness, scope = "project") {
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(await readFile(manifestPath(root, harness, scope), "utf8"));
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw new CliError(`${manifestPath(root, harness, scope)} cannot be read: ${error.message}`);
+  }
+  const skills = parsed2?.skills;
+  if (typeof skills !== "object" || skills === null) throw new CliError(`${manifestPath(root, harness, scope)} records no skills`);
+  return Object.fromEntries(Object.entries(skills).filter((entry) => typeof entry[1] === "string"));
+}
+async function writeManifest(root, harness, scope, skills) {
+  const sorted = Object.fromEntries(Object.entries(skills).sort(([left], [right]) => left < right ? -1 : 1));
+  await writeFile(manifestPath(root, harness, scope), `${JSON.stringify({ format: 1, skills: sorted }, null, 2)}
+`);
+}
+async function writeSkill(root, harness, scope, skill) {
+  const path = skillPath(root, harness, scope, skill.name);
+  await mkdir(join(path, ".."), { recursive: true });
+  await writeFile(path, skill.text);
+  for (const file of skill.files ?? []) {
+    const at = join(path, "..", file.path);
+    await mkdir(join(at, ".."), { recursive: true });
+    await writeFile(at, file.text);
+  }
+}
+async function textAt(path) {
+  try {
+    return await readFile(path, "utf8");
+  } catch {
+    return null;
+  }
+}
+async function hashThere(root, harness, scope, skill) {
+  const path = skillPath(root, harness, scope, skill.name);
+  const text2 = await textAt(path);
+  if (text2 === null) return null;
+  const files = [];
+  for (const file of skill.files ?? []) files.push({ path: file.path, text: await textAt(join(path, "..", file.path)) ?? "" });
+  return skillHash(text2, files);
+}
+async function installMissing(root, harness, skills, scope = "project") {
+  await mkdir(join(root, directoryOf(harness, scope)), { recursive: true });
+  const manifest2 = await readManifest(root, harness, scope) ?? {};
+  const installed = [];
+  const left = [];
+  for (const skill of skills) {
+    const there = await hashThere(root, harness, scope, skill);
+    if (there === null) {
+      await writeSkill(root, harness, scope, skill);
+      manifest2[skill.name] = skill.sha256;
+      installed.push(skill.name);
+    } else if (there === skill.sha256) manifest2[skill.name] = skill.sha256;
+    else if (manifest2[skill.name] === void 0) left.push(skill.name);
+  }
+  await writeManifest(root, harness, scope, manifest2);
+  return { harness, scope, installed, left };
+}
+async function updateSkills(root, skills, scope = "project") {
+  const updated = [];
+  for (const harness of HARNESS_NAMES) {
+    const manifest2 = await readManifest(root, harness, scope);
+    if (manifest2 === null) continue;
+    const replaced = [];
+    const installed = [];
+    for (const skill of skills) {
+      const recorded = manifest2[skill.name];
+      if (recorded === skill.sha256 && await textAt(skillPath(root, harness, scope, skill.name)) !== null) continue;
+      await writeSkill(root, harness, scope, skill);
+      (recorded === void 0 ? installed : replaced).push(skill.name);
+      manifest2[skill.name] = skill.sha256;
+    }
+    await writeManifest(root, harness, scope, manifest2);
+    updated.push({ harness, scope, replaced, installed });
+  }
+  return updated;
+}
+const SERVER_NAME = "pixelvibing";
+const HARNESS_FILES = {
+  claude: ".mcp.json",
+  codex: ".codex/config.toml",
+  cursor: ".cursor/mcp.json",
+  gemini: ".gemini/settings.json",
+  opencode: "opencode.json",
+  copilot: ".vscode/mcp.json"
+};
+const SERVERS = {
+  claude: "mcpServers",
+  cursor: "mcpServers",
+  gemini: "mcpServers",
+  opencode: "mcp",
+  copilot: "servers"
+};
+async function textOf$1(path) {
+  try {
+    return await readFile(path, "utf8");
+  } catch (error) {
+    if (error.code === "ENOENT") return null;
+    throw error;
+  }
+}
+function isObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+const TABLE = `[mcp_servers.${SERVER_NAME}]`;
+const isHeader = (line) => /^\s*\[/.test(line);
+function tableOf(lines) {
+  const start = lines.findIndex((line) => line.trim() === TABLE);
+  if (start === -1) return null;
+  let end = start + 1;
+  while (end < lines.length && !isHeader(lines[end])) end += 1;
+  return { start, end };
+}
+function jsonWithout(harness, text2) {
+  const servers = SERVERS[harness];
+  let parsed2;
+  try {
+    parsed2 = JSON.parse(text2);
+  } catch {
+    return null;
+  }
+  if (!isObject(parsed2) || !isObject(parsed2[servers])) return null;
+  const ours = parsed2[servers][SERVER_NAME];
+  if (!isObject(ours) || !isObject(ours.headers) || ours.headers.Authorization === void 0) return null;
+  const { Authorization: _token, ...others } = ours.headers;
+  const { headers: _headers, ...rest } = ours;
+  const kept = Object.keys(others).length > 0 ? { ...rest, headers: others } : rest;
+  return `${JSON.stringify({ ...parsed2, [servers]: { ...parsed2[servers], [SERVER_NAME]: kept } }, null, 2)}
+`;
+}
+function codexWithout(text2) {
+  const lines = text2.split("\n");
+  const at = tableOf(lines);
+  if (at === null) return null;
+  const header = lines.findIndex((line, index) => index > at.start && index < at.end && /^\s*http_headers\s*=.*\bAuthorization\s*=/.test(line));
+  if (header === -1) return null;
+  const others = lines[header].replace(/\s*,?\s*Authorization\s*=\s*"(?:[^"\\]|\\.)*"\s*,?/, " ").replace(/\{\s+\}/, "{}");
+  const kept = /\{\s*\}/.test(others) ? null : others.replace(/\{\s+/, "{ ").replace(/\s+\}/, " }");
+  return lines.flatMap((line, index) => index !== header ? [line] : kept === null ? [] : [kept]).join("\n");
+}
+async function forgetToken(root) {
+  const changed2 = [];
+  for (const harness of HARNESS_NAMES) {
+    const path = join(root, HARNESS_FILES[harness]);
+    const text2 = await textOf$1(path);
+    if (text2 === null) continue;
+    const next = harness === "codex" ? codexWithout(text2) : jsonWithout(harness, text2);
+    if (next === null) continue;
+    await writeFile(path, next);
+    changed2.push(HARNESS_FILES[harness]);
+  }
+  return changed2;
+}
 const DEFAULT_API_URL = "https://api.pixelvibing.com";
-const DEFAULT_MCP_URL = "https://mcp.pixelvibing.com";
 const DEFAULT_WEB_URL = "https://app.pixelvibing.com/";
 const LOOPBACK = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "[::1]"]);
 const PLAIN_PATH = /^[A-Za-z0-9._~/-]*$/;
@@ -215,6 +448,10 @@ function createWebApi(fetcher = (input, init2) => fetch(input, init2), base = AP
     }
   };
   return {
+    /** The API's own address, whole, for the MCP server's next to it (specs/web-app/ R2.14). */
+    address: new URL(base, globalThis.location?.origin ?? "http://localhost").href.replace(/\/+$/, ""),
+    /** The project's own token, to the signed-in person alone (specs/accounts-and-sign-in/ R3.12). */
+    projectToken: (projectId) => json2(`/projects/${id(projectId)}/token`),
     projects: (before = null) => json2(`/projects${before === null ? "" : `?before=${id(before)}`}`),
     /** A new project from its name and idea, with its settings and its first map's size when chosen (specs/project-settings/ R1.2). */
     createProject: (name, idea, settings, map) => paying2(
@@ -461,7 +698,7 @@ function settingsPath(platform, env, home) {
   const config = env.XDG_CONFIG_HOME?.trim();
   return join(config !== void 0 && config !== "" ? config : join(home, ".config"), "pixelvibing", "cli.json");
 }
-const isCame = (value) => value === "login" || value === "given";
+const isCame = (value) => value === "login" || value === "given" || value === "project";
 async function readSettings(path) {
   let parsed2;
   try {
@@ -814,11 +1051,7 @@ class DesktopSession {
     });
   }
 }
-const TOKEN_NAME_CHARS = 64;
-function tokenName(host) {
-  const name = `pixel-vibing-cli on ${host.trim() === "" ? "this machine" : host.trim()}`;
-  return name.slice(0, TOKEN_NAME_CHARS);
-}
+const PROJECT_TOKEN_NAME = "Project token";
 async function storeReady(context, key) {
   try {
     return await context.services.store.get(key);
@@ -884,24 +1117,24 @@ async function signInInBrowser(context, named, choose) {
   if (outcome === "failed") throw new CliError("the sign-in did not finish: nothing was kept");
   const jwt = await session.jwt();
   if (jwt === null) throw new CliError("the sign-in did not finish: nothing was kept");
-  let made;
+  let token;
   let account;
   let project;
   try {
     const signed = platformWith(context.services.fetch, apiUrl, jwt);
     account = (await signed.account.me()).name;
     project = await choose(signed);
-    made = await signed.account.createToken(tokenName(context.services.hostname()), project.id);
+    token = await signed.account.projectToken(project.id);
   } finally {
     await session.signOut();
   }
   const key = tokenKey(apiUrl, project.id);
   const before = await storeReady(context, key);
   const previous = (await readSettings(context.services.settingsFile)).tokens[key]?.came;
-  await keep(context, key, made.token, "login");
-  if (before !== null && before !== made.token && previous === "login") await revoke(context, apiUrl, before).catch(() => {
+  await keep(context, key, token, "project");
+  if (before !== null && before !== token && previous === "login") await revoke(context, apiUrl, before).catch(() => {
   });
-  return { account, token: made.name, project };
+  return { account, token: PROJECT_TOKEN_NAME, project };
 }
 const SECTOR_SIDE$1 = 128;
 const SECTOR_CELLS = SECTOR_SIDE$1 * SECTOR_SIDE$1;
@@ -2667,18 +2900,34 @@ async function projectNamed(platform, wanted) {
     seen.length === 0 ? `this account has no project yet: make one with \`pixel-vibing-cli link --idea "<what the game is>"\`` : `this account has no project named ${asked}: ${seen.join(", ")}`
   );
 }
-async function chosenProject(context, platform) {
+async function newProjectAsked(context, local) {
+  const name = (await context.io.ask(`Name the new project [${local.manifest.name}]: `)).trim() || local.manifest.name;
+  const idea = (await context.io.ask("What is the game, in a few sentences? ")).trim();
+  if (idea === "") throw new CliError("a project starts from an idea: nothing was made");
+  return { name, idea };
+}
+async function chosenProject(context, platform, local) {
   const { projects } = await platform.web.projects();
-  if (projects.length === 0) throw new CliError(`this account has no project yet: make one with \`pixel-vibing-cli link --idea "<what the game is>"\``);
   if (!context.io.interactive) {
+    if (projects.length === 0) throw new CliError(`this account has no project yet: make one with \`pixel-vibing-cli link --idea "<what the game is>"\``);
     throw new CliError(`name one of your projects, by id or name: ${projects.map((project2) => project2.name).join(", ")}; or make one with --idea`);
   }
-  context.io.warn(`${projects.map((project2, index) => `  ${index + 1}. ${project2.name}`).join("\n")}
-`);
-  const picked = Number((await context.io.ask("Link to which project (number): ")).trim());
-  const project = Number.isInteger(picked) ? projects[picked - 1] : void 0;
-  if (project === void 0) throw new CliError("no project has that number");
-  return project;
+  context.io.step("Project");
+  let picked;
+  try {
+    picked = await context.io.pick("Link this folder to which project?", [
+      ...projects.map((project2) => ({ label: project2.name })),
+      { label: "Make a new project", hint: "from an idea" }
+    ]);
+  } catch (error) {
+    if (error.message === "cancelled") throw new CliError("no project was chosen: nothing was linked");
+    throw error;
+  }
+  const project = projects[picked];
+  if (project !== void 0) return { id: project.id, name: project.name };
+  const { name, idea } = await newProjectAsked(context, local);
+  const made = await paying(platform, () => platform.web.createProject(name, idea));
+  return { id: made.id, name };
 }
 async function projectAskedFor(context, session, local, wanted, idea) {
   if (idea !== void 0) {
@@ -2686,7 +2935,8 @@ async function projectAskedFor(context, session, local, wanted, idea) {
     const made = await paying(session, () => session.web.createProject(name, idea));
     return { id: made.id, name };
   }
-  const project = wanted === void 0 ? await chosenProject(context, session) : await projectNamed(session, wanted);
+  if (wanted === void 0) return chosenProject(context, session, local);
+  const project = await projectNamed(session, wanted);
   return { id: project.id, name: project.name };
 }
 async function linkHere(context, local, wanted, idea, provider) {
@@ -2785,7 +3035,7 @@ async function projectAsked(context, named) {
 }
 const login = {
   name: "login",
-  summary: "Sign in in the browser, and keep an account token for this machine and the folder's platform project",
+  summary: "Sign in in the browser, and keep the folder's platform project's token on this machine",
   usage: "[--provider <name>] [--project <id|name>] | --token [<token> | -]",
   options: {
     provider: { type: "string", value: "<name>", description: "the provider to sign in with, such as github" },
@@ -2805,8 +3055,8 @@ const login = {
       const { account, token, project } = await signInInBrowser(context, stringOf(args, "provider"), (session) => projectNamed(session, wanted));
       answer(
         context,
-        { signedIn: true, account, came: "login", token, project },
-        `Signed in as ${account}. This machine's token for ${project.name}, "${token}", is kept in this system's credential store.`
+        { signedIn: true, account, came: "project", token, project },
+        `Signed in as ${account}. ${project.name}'s token is kept in this system's credential store.`
       );
     }
     if (context.io.env[TOKEN_VARIABLE] !== void 0) context.io.warn(`${TOKEN_VARIABLE} is set, and is used before the kept token while it is.
@@ -2815,7 +3065,7 @@ const login = {
 };
 const logout = {
   name: "logout",
-  summary: "Remove the token kept for the folder's platform project, revoking it when login issued it",
+  summary: "Remove the token kept for the folder's platform project, revoking it only when an earlier login made it for this machine",
   usage: "[--project <id>]",
   options: { project: { type: "string", value: "<id>", description: "the platform project whose token to remove, when not the folder's" } },
   run: async (context, args) => {
@@ -2832,10 +3082,13 @@ const logout = {
     if (came === "login") await revoke(context, apiUrl, token);
     await context.services.store.remove(key);
     await recordToken(context.services.settingsFile, key, null);
+    const local = await findProject(context.io.cwd);
+    const forgotten = local !== null && local.manifest.project?.toLowerCase() === project.toLowerCase() ? await forgetToken(local.root) : [];
+    const entries = forgotten.length === 0 ? "" : ` It was also removed from ${forgotten.join(", ")}.`;
     answer(
       context,
-      { signedOut: true, revoked: came === "login" },
-      came === "login" ? "Signed out: the token was revoked and removed from this machine." : "Signed out: the token was removed from this machine. It was given with --token, so it still works wherever else it is kept: revoke it in the dashboard if it should not."
+      { signedOut: true, revoked: came === "login", entries: forgotten },
+      came === "login" ? `Signed out: the token was revoked and removed from this machine.${entries}` : came === "project" ? `Signed out: the project's token was removed from this machine.${entries} It is the project's own, so it still works wherever else it is kept: revoke it in the dashboard to stop it, and the project gets a new one.` : `Signed out: the token was removed from this machine.${entries} It was given with --token, so it still works wherever else it is kept: revoke it in the dashboard if it should not.`
     );
     if (context.io.env[TOKEN_VARIABLE] !== void 0) context.io.warn(`${TOKEN_VARIABLE} is still set, and this shell still signs in with it.
 `);
@@ -3040,8 +3293,8 @@ function artChange(name, summary, route, method = "POST", key) {
       const platform = await signedIn(context);
       const base = `/projects/${encodeURIComponent(project)}`;
       const path = key === void 0 ? `${base}/art/${route}` : `${base}/art/${route}/${encodeURIComponent(args.positionals[0])}`;
-      const answered = await changed(context, platform, args, path, `${base}/art`, body, method);
-      answer(context, answered, `Changed the art: it is at revision ${String(answered.revision)}.`);
+      const answered2 = await changed(context, platform, args, path, `${base}/art`, body, method);
+      answer(context, answered2, `Changed the art: it is at revision ${String(answered2.revision)}.`);
     }
   };
 }
@@ -3087,8 +3340,8 @@ const artRestore = {
     const project = await linkedHere(context);
     const platform = await signedIn(context);
     const base = `/projects/${encodeURIComponent(project)}`;
-    const answered = await changed(context, platform, args, `${base}/art/restore`, `${base}/art`, { draft: args.positionals[0] });
-    answer(context, answered, `Restored it: the art is at revision ${String(answered.revision)}.`);
+    const answered2 = await changed(context, platform, args, `${base}/art/restore`, `${base}/art`, { draft: args.positionals[0] });
+    answer(context, answered2, `Restored it: the art is at revision ${String(answered2.revision)}.`);
   }
 };
 const artReference = {
@@ -3102,8 +3355,8 @@ const artReference = {
     const platform = await signedIn(context);
     const base = `/projects/${encodeURIComponent(project)}`;
     const [name, image] = args.positionals;
-    const answered = await changed(context, platform, args, `${base}/art/references`, `${base}/art`, { name, image });
-    answer(context, answered, `Kept ${name} as a reference: the art is at revision ${String(answered.revision)}.`);
+    const answered2 = await changed(context, platform, args, `${base}/art/references`, `${base}/art`, { name, image });
+    answer(context, answered2, `Kept ${name} as a reference: the art is at revision ${String(answered2.revision)}.`);
   }
 };
 const artTileset = {
@@ -3117,8 +3370,8 @@ const artTileset = {
     const platform = await signedIn(context);
     const base = `/projects/${encodeURIComponent(project)}`;
     const [run, tileset] = args.positionals;
-    const answered = await changed(context, platform, args, `${base}/art/records/${encodeURIComponent(run)}/tileset`, `${base}/art`, { tileset });
-    answer(context, answered, `Named ${tileset} for ${run}: the art is at revision ${String(answered.revision)}.`);
+    const answered2 = await changed(context, platform, args, `${base}/art/records/${encodeURIComponent(run)}/tileset`, `${base}/art`, { tileset });
+    answer(context, answered2, `Named ${tileset} for ${run}: the art is at revision ${String(answered2.revision)}.`);
   }
 };
 const LEVEL = { z: { type: "string", value: "<level>", description: "the map level, 0 to 14" } };
@@ -3162,8 +3415,8 @@ const mapWrite = {
     const body = await bodyOf(context, args);
     const platform = await signedIn(context);
     const base = `/projects/${encodeURIComponent(project)}`;
-    const answered = await changed(context, platform, args, `${base}/map/sectors`, `${base}/map`, body, "PUT");
-    answer(context, answered, `Wrote the sectors: the map is at revision ${String(answered.revision)}.`);
+    const answered2 = await changed(context, platform, args, `${base}/map/sectors`, `${base}/map`, body, "PUT");
+    answer(context, answered2, `Wrote the sectors: the map is at revision ${String(answered2.revision)}.`);
   }
 };
 const mapSize = {
@@ -3178,8 +3431,8 @@ const mapSize = {
     const project = await linkedHere(context);
     const platform = await signedIn(context);
     const base = `/projects/${encodeURIComponent(project)}`;
-    const answered = await changed(context, platform, args, `${base}/map/size`, `${base}/map`, { width, height }, "PUT");
-    answer(context, answered, `Grew the map to ${width} × ${height} tiles: it is at revision ${String(answered.revision)}.`);
+    const answered2 = await changed(context, platform, args, `${base}/map/size`, `${base}/map`, { width, height }, "PUT");
+    answer(context, answered2, `Grew the map to ${width} × ${height} tiles: it is at revision ${String(answered2.revision)}.`);
   }
 };
 const ICON_SIZES = [16, 32, 64];
@@ -4299,7 +4552,7 @@ function pngCodec(zlib) {
 }
 const EXPORT_MARK = ".pixelvibing-export";
 const codec$1 = pngCodec({ inflate: (data, maxOutputLength) => inflateSync(data, { maxOutputLength }), deflate: (data) => deflateSync(data) });
-async function isDirectory$1(path) {
+async function isDirectory(path) {
   try {
     return (await lstat(path)).isDirectory();
   } catch {
@@ -4339,7 +4592,7 @@ async function writeWhole(out, files, engine) {
     });
     throw error;
   }
-  const had = await isDirectory$1(out);
+  const had = await isDirectory(out);
   if (had) await rename(out, old);
   try {
     await rename(staging, out);
@@ -6166,7 +6419,7 @@ const mcpHeaders = {
   }
 };
 const GUIDE_KIND = "style-guide";
-const sha256$1 = (text2) => createHash("sha256").update(text2).digest("hex");
+const sha256 = (text2) => createHash("sha256").update(text2).digest("hex");
 const guidePath = (local) => join(local.root, ...STYLE_GUIDE_FILE.split("/"));
 async function localGuide(local) {
   const boundary = artBoundary(local);
@@ -6176,7 +6429,7 @@ async function unpushed(local) {
   const text2 = await localGuide(local);
   if (text2 === null) return false;
   const pulled = (await readRecord(local)).guide;
-  return pulled === null ? text2 !== starterGuide(local.manifest.name) : sha256$1(text2) !== pulled.sha256;
+  return pulled === null ? text2 !== starterGuide(local.manifest.name) : sha256(text2) !== pulled.sha256;
 }
 async function noGuide(platform, project) {
   const { guide } = await platform.web.project(project);
@@ -6194,7 +6447,7 @@ async function currentGuide(platform, project) {
 async function writeGuide(local, guide) {
   await artBoundary(local).writeFileReplacing(guidePath(local), guide.text);
   const record = await readRecord(local);
-  await writeRecord(local, { ...record, guide: { version: guide.version, sha256: sha256$1(guide.text) } });
+  await writeRecord(local, { ...record, guide: { version: guide.version, sha256: sha256(guide.text) } });
 }
 const CHANGED = "pixelvibing/style-guide.md has changes that were never pushed: push them with `pixel-vibing-cli guide push`, or pass --force to replace them with the platform's";
 const guidePull = {
@@ -6208,7 +6461,7 @@ const guidePull = {
     const guide = await currentGuide(platform, project);
     const record = await readRecord(local);
     const text2 = await localGuide(local);
-    if (record.guide?.version === guide.version && text2 !== null && sha256$1(text2) === record.guide.sha256) {
+    if (record.guide?.version === guide.version && text2 !== null && sha256(text2) === record.guide.sha256) {
       answer(context, { version: guide.version, current: true }, `The style guide is current: version ${guide.version}.`);
       return;
     }
@@ -6226,7 +6479,7 @@ const guidePush = {
     const text2 = await localGuide(local);
     if (text2 === null) throw new CliError(`${STYLE_GUIDE_FILE} is not there: \`pixel-vibing-cli guide pull\` writes it`);
     const pulled = (await readRecord(local)).guide;
-    if (pulled !== null && sha256$1(text2) === pulled.sha256) {
+    if (pulled !== null && sha256(text2) === pulled.sha256) {
       answer(context, { version: pulled.version, pushed: false }, `Nothing to push: ${STYLE_GUIDE_FILE} is version ${pulled.version} as it was pulled.`);
       return;
     }
@@ -6249,7 +6502,7 @@ const guidePush = {
       throw error;
     }
     const record = await readRecord(local);
-    await writeRecord(local, { ...record, guide: { version: version2, sha256: sha256$1(text2) } });
+    await writeRecord(local, { ...record, guide: { version: version2, sha256: sha256(text2) } });
     answer(context, { version: version2, pushed: true }, `Kept ${STYLE_GUIDE_FILE} as version ${version2} of the style guide.`);
   }
 };
@@ -6610,210 +6863,6 @@ const move = {
     );
   }
 };
-const version = "0.56.2";
-const manifest = {
-  version
-};
-const VERSION = manifest.version;
-const PINNED_PACKAGE = `@pixelvibing/cli@${VERSION}`;
-const SERVER_NAME = "pixelvibing";
-const PLAIN_ADDRESS = /^https?:\/\/[A-Za-z0-9.-]+(:[0-9]+)?(\/[A-Za-z0-9._~/-]*)?$/;
-function mcpEntry(apiUrl) {
-  if (!PLAIN_ADDRESS.test(apiUrl)) {
-    throw new CliError(`${apiUrl} cannot be written into a harness's command: an address there holds only letters, digits and . - : / _ ~`);
-  }
-  if (apiUrl === DEFAULT_API_URL) return { url: DEFAULT_MCP_URL, headers: `npx --yes ${PINNED_PACKAGE} mcp headers` };
-  return { url: `${apiUrl}/mcp`, headers: `npx --yes ${PINNED_PACKAGE} mcp headers --api ${apiUrl}` };
-}
-async function textOf$1(path) {
-  try {
-    return await readFile(path, "utf8");
-  } catch (error) {
-    if (error.code === "ENOENT") return null;
-    throw error;
-  }
-}
-const CLAUDE_FILE = ".mcp.json";
-const CODEX_FILE = join(".codex", "config.toml");
-const TABLE = `[mcp_servers.${SERVER_NAME}]`;
-const isHeader = (line) => /^\s*\[/.test(line);
-function claudeWith(text2, entry, onlyWhereConfigured) {
-  let parsed2 = {};
-  if (text2 !== null) {
-    try {
-      parsed2 = JSON.parse(text2);
-    } catch (error) {
-      throw new CliError(`${CLAUDE_FILE} is not valid JSON, so it was left as it is: ${error.message}`);
-    }
-    if (typeof parsed2 !== "object" || parsed2 === null || Array.isArray(parsed2)) throw new CliError(`${CLAUDE_FILE} is not an object, so it was left as it is`);
-  }
-  const servers = parsed2.mcpServers;
-  if (servers !== void 0 && (typeof servers !== "object" || servers === null || Array.isArray(servers))) {
-    throw new CliError(`${CLAUDE_FILE}'s mcpServers is not an object, so it was left as it is`);
-  }
-  const current = servers ?? {};
-  if (onlyWhereConfigured && current[SERVER_NAME] === void 0) return null;
-  const next = { ...parsed2, mcpServers: { ...current, [SERVER_NAME]: { type: "http", url: entry.url, headersHelper: entry.headers } } };
-  return `${JSON.stringify(next, null, 2)}
-`;
-}
-function codexWith(text2, entry, onlyWhereConfigured) {
-  const table = [TABLE, `url = ${JSON.stringify(entry.url)}`, `http_headers_helper = ${JSON.stringify(entry.headers)}`];
-  const lines = (text2 ?? "").split("\n");
-  const start = lines.findIndex((line) => line.trim() === TABLE);
-  if (start === -1) {
-    if (onlyWhereConfigured) return null;
-    const before = (text2 ?? "").replace(/\n*$/, "");
-    return `${before === "" ? "" : `${before}
-
-`}${table.join("\n")}
-`;
-  }
-  let end = start + 1;
-  while (end < lines.length && !isHeader(lines[end])) end += 1;
-  const kept = lines.slice(start + 1, end).filter((line) => line.trim() !== "" && !/^\s*(url|http_headers_helper)\s*=/.test(line));
-  const rest = lines.slice(end);
-  return [...lines.slice(0, start), ...table, ...kept, ...rest.length > 0 ? ["", ...rest] : [""]].join("\n").replace(/\n{3,}/g, "\n\n");
-}
-async function configureHarness(root, harness, entry, onlyWhereConfigured = false) {
-  const file = harness === "claude" ? CLAUDE_FILE : CODEX_FILE;
-  const path = join(root, file);
-  const text2 = await textOf$1(path);
-  const next = harness === "claude" ? claudeWith(text2, entry, onlyWhereConfigured) : codexWith(text2, entry, onlyWhereConfigured);
-  if (next === null) return "absent";
-  if (next === text2) return "current";
-  if (harness === "codex") await mkdir(join(root, ".codex"), { recursive: true });
-  await writeFile(path, next);
-  return "written";
-}
-const HARNESS_FILES = { claude: ".mcp.json", codex: ".codex/config.toml" };
-const HARNESSES = { claude: ".claude", codex: ".codex" };
-const SKILLS_MANIFEST = "pixelvibing-skills.json";
-const sha256 = (text2) => createHash("sha256").update(text2).digest("hex");
-function skillHash(text2, files = []) {
-  if (files.length === 0) return sha256(text2);
-  const hash = createHash("sha256").update(text2);
-  for (const file of files) hash.update(`\0${file.path}\0`).update(file.text);
-  return hash.digest("hex");
-}
-async function referencesOf(directory) {
-  let names;
-  try {
-    names = (await readdir(join(directory, "references"), { withFileTypes: true })).filter((entry) => entry.isFile()).map((entry) => entry.name);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const name of names.sort()) files.push({ path: `references/${name}`, text: await readFile(join(directory, "references", name), "utf8") });
-  return files;
-}
-const SHIPPED_DIRECTORY = fileURLToPath(new URL("../skills/", import.meta.url));
-async function shippedSkills(directory = SHIPPED_DIRECTORY) {
-  const names = (await readdir(directory, { withFileTypes: true })).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
-  const skills = [];
-  for (const name of names.sort()) {
-    const text2 = await readFile(join(directory, name, "SKILL.md"), "utf8");
-    const files = await referencesOf(join(directory, name));
-    skills.push({ name, text: text2, ...files.length > 0 ? { files } : {}, sha256: skillHash(text2, files) });
-  }
-  return skills;
-}
-async function isDirectory(path) {
-  try {
-    return (await stat(path)).isDirectory();
-  } catch {
-    return false;
-  }
-}
-async function harnessesFor(root, named) {
-  if (named.length > 0) {
-    const unknown = named.filter((name) => !(name in HARNESSES));
-    if (unknown.length > 0) throw new CliError(`--harness is ${Object.keys(HARNESSES).join(" or ")}, not ${unknown.join(", ")}`);
-    return [...new Set(named)];
-  }
-  const present = [];
-  for (const harness of Object.keys(HARNESSES)) if (await isDirectory(join(root, HARNESSES[harness]))) present.push(harness);
-  return present.length > 0 ? present : ["claude"];
-}
-const manifestPath = (root, harness) => join(root, HARNESSES[harness], SKILLS_MANIFEST);
-const skillPath = (root, harness, name) => join(root, HARNESSES[harness], "skills", name, "SKILL.md");
-async function readManifest(root, harness) {
-  let parsed2;
-  try {
-    parsed2 = JSON.parse(await readFile(manifestPath(root, harness), "utf8"));
-  } catch (error) {
-    if (error.code === "ENOENT") return null;
-    throw new CliError(`${manifestPath(root, harness)} cannot be read: ${error.message}`);
-  }
-  const skills = parsed2?.skills;
-  if (typeof skills !== "object" || skills === null) throw new CliError(`${manifestPath(root, harness)} records no skills`);
-  return Object.fromEntries(Object.entries(skills).filter((entry) => typeof entry[1] === "string"));
-}
-async function writeManifest(root, harness, skills) {
-  const sorted = Object.fromEntries(Object.entries(skills).sort(([left], [right]) => left < right ? -1 : 1));
-  await writeFile(manifestPath(root, harness), `${JSON.stringify({ format: 1, skills: sorted }, null, 2)}
-`);
-}
-async function writeSkill(root, harness, skill) {
-  const path = skillPath(root, harness, skill.name);
-  await mkdir(join(path, ".."), { recursive: true });
-  await writeFile(path, skill.text);
-  for (const file of skill.files ?? []) {
-    const at = join(path, "..", file.path);
-    await mkdir(join(at, ".."), { recursive: true });
-    await writeFile(at, file.text);
-  }
-}
-async function textAt(path) {
-  try {
-    return await readFile(path, "utf8");
-  } catch {
-    return null;
-  }
-}
-async function hashThere(root, harness, skill) {
-  const path = skillPath(root, harness, skill.name);
-  const text2 = await textAt(path);
-  if (text2 === null) return null;
-  const files = [];
-  for (const file of skill.files ?? []) files.push({ path: file.path, text: await textAt(join(path, "..", file.path)) ?? "" });
-  return skillHash(text2, files);
-}
-async function installMissing(root, harness, skills) {
-  const manifest2 = await readManifest(root, harness) ?? {};
-  const installed = [];
-  const left = [];
-  for (const skill of skills) {
-    const there = await hashThere(root, harness, skill);
-    if (there === null) {
-      await writeSkill(root, harness, skill);
-      manifest2[skill.name] = skill.sha256;
-      installed.push(skill.name);
-    } else if (there === skill.sha256) manifest2[skill.name] = skill.sha256;
-    else if (manifest2[skill.name] === void 0) left.push(skill.name);
-  }
-  await writeManifest(root, harness, manifest2);
-  return { harness, installed, left };
-}
-async function updateSkills(root, skills) {
-  const updated = [];
-  for (const harness of Object.keys(HARNESSES)) {
-    const manifest2 = await readManifest(root, harness);
-    if (manifest2 === null) continue;
-    const replaced = [];
-    const installed = [];
-    for (const skill of skills) {
-      const recorded = manifest2[skill.name];
-      if (recorded === skill.sha256 && await textAt(skillPath(root, harness, skill.name)) !== null) continue;
-      await writeSkill(root, harness, skill);
-      (recorded === void 0 ? installed : replaced).push(skill.name);
-      manifest2[skill.name] = skill.sha256;
-    }
-    await writeManifest(root, harness, manifest2);
-    updated.push({ harness, replaced, installed });
-  }
-  return updated;
-}
 const BLOCK_OPEN = "<!-- pixelvibing:skills -->";
 const BLOCK_CLOSE = "<!-- /pixelvibing:skills -->";
 const ROUTED_FILES = [
@@ -6830,7 +6879,8 @@ function routingBlock(skills) {
     "## PixelVibing art",
     "",
     "This game's art is made on PixelVibing. Before making, finding, pulling or exporting any of it,",
-    "load the Skill for the request from `.claude/skills/` or `.codex/skills/` and follow it,",
+    "load the Skill for the request from this harness's Skills folder, such as `.claude/skills/` or `.agents/skills/`,",
+    "and follow it,",
     "starting with `pixelvibing`. Never write a PixelVibing token into a file or a command.",
     "",
     ...lines,
@@ -6932,16 +6982,57 @@ function routingWords(routed) {
     })
   };
 }
+async function harnessesChosen(context, root, named) {
+  if (named.length > 0 || !context.io.interactive || context.json) return harnessesFor(root, named);
+  const found = await harnessesFound(root);
+  context.io.step("Harnesses");
+  let marks;
+  try {
+    marks = await context.io.choose(
+      "Install the Skills into which coding assistants?",
+      HARNESS_NAMES.map((harness) => ({ label: HARNESSES[harness].name, marked: found.includes(harness) }))
+    );
+  } catch (error) {
+    if (error.message === "cancelled") throw new CliError("no harness was chosen: nothing was installed");
+    throw error;
+  }
+  const chosen = HARNESS_NAMES.filter((_, index) => marks[index] === true);
+  if (chosen.length === 0) throw new CliError("no harness was marked: nothing was installed");
+  return chosen;
+}
+async function scopeChosen(context, given2) {
+  if (given2 !== void 0) {
+    if (given2 !== "user" && given2 !== "project") throw new CliError(`--scope is user or project, not ${given2}`);
+    return given2;
+  }
+  if (!context.io.interactive || context.json) return "user";
+  let picked;
+  try {
+    picked = await context.io.pick("Install the Skills for which projects?", [
+      { label: "Every project of yours", hint: "each assistant's own directory" },
+      { label: "This repository alone" }
+    ]);
+  } catch (error) {
+    if (error.message === "cancelled") throw new CliError("no scope was chosen: nothing was installed");
+    throw error;
+  }
+  return picked === 1 ? "project" : "user";
+}
 const setup = {
   name: "setup",
   summary: "Sign in, make and link the local project, install the Skills and name them in AGENTS.md, doing only what is missing",
-  usage: "[--harness claude|codex]… [--project <id|name> | --idea <text>] [--name <name>] [--provider <name>]",
+  usage: "[--harness <name>]… [--scope user|project] [--project <id|name> | --idea <text>] [--name <name>] [--provider <name>]",
   options: {
     harness: {
       type: "string",
       multiple: true,
-      value: "<claude|codex>",
-      description: "the harness to install the Skills into; those this repository has, else Claude Code"
+      value: `<${HARNESS_NAMES.join("|")}>`,
+      description: "a harness to install the Skills into, without the list; with none and no terminal, those this repository has, else Claude Code"
+    },
+    scope: {
+      type: "string",
+      value: "<user|project>",
+      description: "install the Skills for every project of yours (the default) or for this repository alone"
     },
     project: { type: "string", value: "<id|name>", description: "the platform project to link, when the local project names none" },
     idea: { type: "string", value: "<text>", description: "make the platform project from this idea, when the local project names none" },
@@ -6950,14 +7041,18 @@ const setup = {
   },
   run: async (context, args) => {
     const done = [];
+    const steps = context.io.interactive && !context.json;
+    if (steps) context.io.step("PixelVibing setup", "start");
     if (await findProject(context.io.cwd) === null) {
       const made = await initProject(context.io.cwd, stringOf(args, "name"));
       done.push(`made ${made.root} the local project ${made.name}`);
     }
     const local = await projectHere(context.io.cwd);
     let linked = local.manifest.project ?? null;
-    const kept = linked === null ? null : await tokenFor(context.services.store, tokenKey(apiUrlOf(context), linked), context.io.env);
+    const apiUrl = apiUrlOf(context);
+    const kept = linked === null ? null : await tokenFor(context.services.store, tokenKey(apiUrl, linked), context.io.env);
     if (linked === null || kept === null) {
+      if (steps) context.io.step("Sign in");
       const { project, account } = await linkHere(
         context,
         local,
@@ -6970,17 +7065,16 @@ const setup = {
       linked = project.id;
     }
     const skills = await shippedSkills();
-    const harnesses = await harnessesFor(local.root, stringsOf(args, "harness"));
-    const entry = mcpEntry(apiUrlOf(context));
+    const harnesses = await harnessesChosen(context, local.root, stringsOf(args, "harness"));
+    const scope = await scopeChosen(context, stringOf(args, "scope"));
+    const base = scope === "user" ? context.services.home : local.root;
     const installed = [];
     for (const harness of harnesses) {
-      const result = await installMissing(local.root, harness, skills);
-      const mcp = await configureHarness(local.root, harness, entry);
-      installed.push({ ...result, mcp });
-      if (result.installed.length > 0) done.push(`installed ${result.installed.join(", ")} into ${HARNESSES[result.harness]}/skills/`);
-      if (mcp === "written") done.push(`configured the MCP server in ${HARNESS_FILES[harness]}`);
+      const result = await installMissing(base, harness, skills, scope);
+      installed.push(result);
+      if (result.installed.length > 0) done.push(`installed ${result.installed.join(", ")} into ${skillsDirectory(result.harness, scope)}/`);
       for (const name of result.left) {
-        context.io.warn(`${HARNESSES[result.harness]}/skills/${name}/ is already there and is not the one this CLI ships: it was left as it is.
+        context.io.warn(`${skillsDirectory(result.harness, scope)}/${name}/ is already there and is not the one this CLI ships: it was left as it is.
 `);
       }
     }
@@ -6988,11 +7082,9 @@ const setup = {
     const said = routingWords(routing);
     done.push(...said.done);
     for (const warning of said.warnings) context.io.warn(warning);
-    answer(
-      context,
-      { root: local.root, project: linked, harnesses: installed, routing },
-      done.length === 0 ? "Nothing to do: this repository is set up." : `Set up: ${done.join("; ")}.`
-    );
+    const summary = done.length === 0 ? "Nothing to do: this repository is set up." : `Set up: ${done.join("; ")}.`;
+    if (steps) context.io.step("Done: the MCP server, for a client that needs it, is in the project's Install tab", "end");
+    answer(context, { root: local.root, project: linked, harnesses: installed, routing }, summary);
   }
 };
 const update = {
@@ -7001,16 +7093,17 @@ const update = {
   run: async (context) => {
     const local = await projectHere(context.io.cwd);
     const skills = await shippedSkills();
-    const updated = await updateSkills(local.root, skills);
+    const updated = [...await updateSkills(local.root, skills), ...await updateSkills(context.services.home, skills, "user")];
     if (updated.length === 0) throw new CliError("no Skills of this CLI are installed here: `pixel-vibing-cli setup` installs them");
-    const entry = mcpEntry(apiUrlOf(context));
     const harnesses = [];
-    for (const result of updated) harnesses.push({ ...result, mcp: await configureHarness(local.root, result.harness, entry, true) });
-    const written = harnesses.flatMap((result) => [
-      ...result.replaced.map((name) => `replaced ${HARNESSES[result.harness]}/skills/${name}`),
-      ...result.installed.map((name) => `installed ${HARNESSES[result.harness]}/skills/${name}`),
-      ...result.mcp === "written" ? [`brought the MCP server in ${HARNESS_FILES[result.harness]} to this version`] : []
-    ]);
+    const written = [];
+    for (const result of updated) {
+      written.push(
+        ...result.replaced.map((name) => `replaced ${skillsDirectory(result.harness, result.scope)}/${name}`),
+        ...result.installed.map((name) => `installed ${skillsDirectory(result.harness, result.scope)}/${name}`)
+      );
+      harnesses.push(result);
+    }
     const routing = await writeRouting(local.root, skills);
     const said = routingWords(routing);
     written.push(...said.done);
@@ -7183,7 +7276,6 @@ function machineServices(env) {
     settingsFile: settingsPath(process.platform, env, homedir()),
     fetch: globalThis.fetch,
     openExternal: (url) => detached(...browserCommand(process.platform, url)),
-    hostname,
     sleep: (ms) => new Promise((resolve2) => setTimeout(resolve2, ms)),
     now: Date.now,
     platform: process.platform,
@@ -7227,6 +7319,38 @@ function readLine(input, output, question) {
     });
   });
 }
+function answered(value) {
+  if (isCancel(value)) throw new Error("cancelled");
+  return value;
+}
+const streamsOf = (input, output) => ({ input, output });
+async function readChecklist(input, output, question, options) {
+  const marked = answered(
+    await multiselect({
+      message: question,
+      options: options.map((option, index) => ({ value: index, label: option.label })),
+      initialValues: options.flatMap((option, index) => option.marked ? [index] : []),
+      required: false,
+      ...streamsOf(input, output)
+    })
+  );
+  return options.map((_, index) => marked.includes(index));
+}
+async function readPick(input, output, question, options) {
+  return answered(
+    await select({
+      message: question,
+      options: options.map((option, index) => ({ value: index, label: option.label, ...option.hint === void 0 ? {} : { hint: option.hint } })),
+      ...streamsOf(input, output)
+    })
+  );
+}
+function drawStep(output, title, at) {
+  const opts = { output };
+  if (at === "start") intro(title, opts);
+  else if (at === "end") outro(title, opts);
+  else log.step(title, opts);
+}
 async function readAll(input) {
   let text2 = "";
   for await (const chunk2 of input) text2 += chunk2.toString();
@@ -7244,9 +7368,17 @@ function terminalOf(streams) {
     cwd: streams.cwd,
     interactive: streams.stdin.isTTY === true && streams.stderr.isTTY === true,
     ask: (question, hidden = false) => hidden ? readHidden(streams.stdin, streams.stderr, question) : readLine(streams.stdin, streams.stderr, question),
-    readInput: () => readAll(streams.stdin)
+    readInput: () => readAll(streams.stdin),
+    choose: (question, options) => readChecklist(streams.stdin, streams.stderr, question, options),
+    pick: (question, options) => readPick(streams.stdin, streams.stderr, question, options),
+    step: (title, at = "step") => drawStep(streams.stderr, title, at)
   };
 }
+const version = "0.57.0";
+const manifest = {
+  version
+};
+const VERSION = manifest.version;
 const COMMANDS = [
   setup,
   update,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pixelvibing/cli",
-  "version": "0.56.2",
+  "version": "0.57.0",
   "description": "PixelVibing: pixel art game assets from the command line, and the Skills that teach coding assistants to make them.",
   "license": "MIT",
   "homepage": "https://pixelvibing.com",
@@ -32,6 +32,7 @@
     "access": "public"
   },
   "dependencies": {
+    "@clack/prompts": "1.8.1",
     "@napi-rs/keyring": "2.1.0"
   },
   "devDependencies": {